CVEvulnerability

CVE-2015-0797

6.8 MEDIUM Published 2015-05-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-05-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 on Linux, allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.

Affected configurations

• gstreamer gstreamer (< 1.4.5) • mozilla firefox (< 38.0) • mozilla firefox (>= 31.0 < 31.7) • mozilla seamonkey (< 2.35) • mozilla thunderbird (< 31.7) • mozilla thunderbird (>= 38.0 < 38.0.1) • suse linux enterprise desktop 11 • suse linux enterprise server 11 • suse linux enterprise software development kit 11 • redhat enterprise linux desktop 5.0 • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux eus 6.6 • redhat enterprise linux eus 7.1 • redhat enterprise linux eus 7.2 • redhat enterprise linux eus 7.3 • redhat enterprise linux eus 7.4 • redhat enterprise linux eus 7.5 • redhat enterprise linux eus 7.6 • redhat enterprise linux eus 7.7 • redhat enterprise linux server 5.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 6.6 • redhat enterprise linux server aus 7.3 • redhat enterprise linux server aus 7.4 • redhat enterprise linux server aus 7.6 • redhat enterprise linux server aus 7.7 • redhat enterprise linux server tus 6.6 • redhat enterprise linux server tus 7.3 • redhat enterprise linux server tus 7.6 • redhat enterprise linux server tus 7.7 • redhat enterprise linux workstation 5.0 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0 • debian debian linux 7.0 • debian debian linux 8.0 • debian debian linux 9.0

References